General
- Target 2026-08-10_9c6944f625a6a9cb3af066b8c16618f9_amadey_coinminer_elex_smoke-loader_stop
- Size 511KB
- Sample260811-bf1j4abf64
- SHA256 138688b66584da130f50998f068a62b9bd9059108f31db89129a0ad9e48d8ef6
- MD5 9c6944f625a6a9cb3af066b8c16618f9
- SHA1 a472e102299e5e432b60562c60b0c7f1baee775c
- SHA512 64e85aacf2311486a9a656b8f5c3d7ebf3402f4ed7c87b7b4b400a3076b6e8aca04802d41a5da5fcbe0dc2feca7d6534a0e63ec4293bdca24336f47d96cc25fc
- SSDEEP 6144:FcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:FSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T1F0B45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_9c6944f625a6a9cb3af066b8c16618f9_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_9c6944f625a6a9cb3af066b8c16618f9_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_9c6944f625a6a9cb3af066b8c16618f9_amadey_coinminer_elex_smoke-loader_stop
- Size 511KB
- SHA256 138688b66584da130f50998f068a62b9bd9059108f31db89129a0ad9e48d8ef6
- MD5 9c6944f625a6a9cb3af066b8c16618f9
- SHA1 a472e102299e5e432b60562c60b0c7f1baee775c
- SHA512 64e85aacf2311486a9a656b8f5c3d7ebf3402f4ed7c87b7b4b400a3076b6e8aca04802d41a5da5fcbe0dc2feca7d6534a0e63ec4293bdca24336f47d96cc25fc
- SSDEEP 6144:FcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:FSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T1F0B45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory